Cloud Security

Apsara Android client remote code execution to remote reading of any user's system Address Book + chat information (earlier version is required) As a comprehensive communication service of China Mobile, Feixin integrates voice (IVR), GPRS, SMS, and

Foxit Reader FlateDecode Heap Buffer Overflow Remote Code Execution VulnerabilityFoxit Reader FlateDecode Heap Buffer Overflow Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: Foxit Reader Description: Foxit Reader

Detailed explanation on how vro is configured to implement DDoS defense and detailed explanation on router ddos DefenseWhat are the operations on vro settings to implement DDoS defense? First, we need to understand what the principles of DDoS

SSL/TLS LogJam mitm Security Restriction Bypass Vulnerability (CVE-2015-4000)SSL/TLS LogJam mitm Security Restriction Bypass Vulnerability (CVE-2015-4000) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL OpenSSL Project OpenSSL

Apache Tomcat Security Manager Bypass Vulnerability (CVE-2014-7810)Apache Tomcat Security Manager Bypass Vulnerability (CVE-2014-7810) Release date:Updated on:Affected Systems: Apache Group Tomcat 8.0.0-RC1 - 8.0.15Apache Group Tomcat 7.0.0 -

Multiple vulnerabilities of dongle can be exploited to manipulate website configurations of any account and blacklist all users with one click (users will be blocked by dongle) The vulnerability may seem silly but harmful.------------------By the

The method of using PCRE regular-Expression Vulnerability CVE-2015-0318 in Flash0x00 Preface Issue 199/PSIRT-3161/CVE-2015-0318 Brief Introduction: The PCRE Regular Expression parsing engine used by Flash Note: Obviously, this engine has a

Multiple security vulnerabilities in VLC Media Player Release date:Updated on: Affected Systems:VideoLAN VLC Media Player 2.1.5Description:Bugtraq id: 72252 VLC Media Player is a multimedia Player. VLC media player 2.1.5 and other versions have

Microsoft Word '.doc 'Remote Denial of Service Vulnerability Release date:Updated on: Affected Systems:Microsoft Word XPMicrosoft Word 2003 SP3Microsoft Word 2003 SP2Unaffected system:Microsoft Word 2010Description:---------------------------------

Barracuda Networks Web Security Flex Multiple HTML Injection Vulnerabilities Release date:Updated on: Affected Systems:Barracuda Networks Web Security flex4.1Description:------------------------------------------------------------------------------

Virus Trojan scan: manually killing pandatvI. Preface At the beginning of this series of studies, I chose the "pandatv incense" virus as the study object. The reason for choosing this virus is mainly because it is representative. On the one hand, it

The Antiy vulnerability can cause virus-free or mistaken removal of legitimate software. The android version of Antiy avl pro has a vulnerability. If used by viruses or Trojans, the vulnerability can be detected by avl scans. After avl pro detects

Teach you how to clean up the rose virus in the USB flash drive The rose virus, one of the three major viruses of a USB flash drive, is believed to be a frequent visitor to many of its friends ". Rosevirus (rose.exe) is a benign virus consisting of

Use encrypted OFFICE binary format to escape detection   This article was published by Intel's secure Haifei Li and Intel's laboratory Xiaoning Li. Microsoft Office documents play an important role in our work and personal life. Unfortunately, in

Dropbox's Web Security Protection Policy II: unsafe-inline instruction and random number Configuration One of Dropbox's Web security protection measures is to use content-based security policies (CSPs ). Devdatta Akhawe, a security engineer of

Create a plug-in II that automatically detects whether XSS exists on the page Preface:The changes in this version are a little larger than those in the previous version. First, the entire code architecture is modified, which is more intuitive and

Password Reset Vulnerability for any user on popular websites The password reset operation is not associated with a specific mobile phone number. As a result, the password of any registered mobile phone account can be reset. 1. The returned results

Popular Wordpress analysis plug-in WP-Slimstat weak key and SQL Injection Vulnerability Analysis   The Web security enterprise Sucuri said on Tuesday that they found an SQL injection vulnerability in the latest Wordpress analysis plug-in WP-Slimstat,

A model web platform SQL injection vulnerability exposes more than 2500 model data and group data of multiple model companies. A model web platform SQL injection vulnerability exposes more than 2500 model data and group data of multiple model

Special upload skills bypass PHP image conversion for Remote Code Execution (RCE) I used a special Image Upload technique, bypassing the PHP GD library to convert images, and finally successfully implemented remote code execution. This is the case.